topic Re: services (http,https) in General Topics https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11509#M8474 <HTML><HEAD></HEAD><BODY><P>hmm, I guess that will be a doable workaround - thanks again!</P></BODY></HTML> Mon, 04 Mar 2013 10:35:18 GMT mikand 2013-03-04T10:35:18Z services (http,https) https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11500#M8465 <HTML><HEAD></HEAD><BODY><P>Please excuse my ignorance, new to FW support and PAN.&nbsp; What is the criteria for services, why is there only 2 http/https?</P><P></P><P>thx,</P></BODY></HTML> Fri, 01 Mar 2013 20:25:26 GMT https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11500#M8465 billpipes 2013-03-01T20:25:26Z Re: services (http,https) https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11501#M8466 <HTML><HEAD></HEAD><BODY><P>These are pre defined ones , you can navigate to objects-services and create new ones.</P></BODY></HTML> Fri, 01 Mar 2013 20:32:07 GMT https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11501#M8466 sraghunandan 2013-03-01T20:32:07Z Re: services (http,https) https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11502#M8467 <HTML><HEAD></HEAD><BODY><P>Services are used for anything that is not already defined as an application by Palo Alto. We have had to use them for many custom in house Apps. As sraghunandan said, http and https are defined by Palo Alto, and are used in NAT translation Rules.</P><P></P><P>An Application is the preferred method for defining a policy, as the application is defined by signatures, not just ports. </P></BODY></HTML> Fri, 01 Mar 2013 22:00:10 GMT https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11502#M8467 craymond 2013-03-01T22:00:10Z Re: services (http,https) https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11503#M8468 <HTML><HEAD></HEAD><BODY><P>Service is simply what others call a port.</P></BODY></HTML> Fri, 01 Mar 2013 23:46:34 GMT https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11503#M8468 mikand 2013-03-01T23:46:34Z Re: services (http,https) https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11504#M8469 <HTML><HEAD></HEAD><BODY><P>As mikand said, they are just ports, and the criteria that is probably best practice is only use them when you can't use an application.</P></BODY></HTML> Mon, 04 Mar 2013 04:09:45 GMT https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11504#M8469 craymond 2013-03-04T04:09:45Z Re: services (http,https) https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11505#M8470 <HTML><HEAD></HEAD><BODY><P>Speaking of ports, what about srcport - how to define that in a security rule in PA?</P></BODY></HTML> Mon, 04 Mar 2013 07:52:19 GMT https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11505#M8470 mikand 2013-03-04T07:52:19Z Re: services (http,https) https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11506#M8471 <HTML><HEAD></HEAD><BODY><P>You can define source ports under services.</P></BODY></HTML> Mon, 04 Mar 2013 08:43:44 GMT https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11506#M8471 sraghunandan 2013-03-04T08:43:44Z Re: services (http,https) https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11507#M8472 <HTML><HEAD></HEAD><BODY><P>Doh! there it was, thanks! <img id="smileyhappy" class="emoticon emoticon-smileyhappy" src="https://live.paloaltonetworks.com/i/smilies/16x16_smiley-happy.png" alt="Smiley Happy" title="Smiley Happy" /></P><P></P><P>Page 232 in the PA-5.0_Administrators_Guide.pdf (for further references).</P><P></P><P>Is it possible to have the srcport being used displayed in the security policy list?</P></BODY></HTML> Mon, 04 Mar 2013 08:56:11 GMT https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11507#M8472 mikand 2013-03-04T08:56:11Z Re: services (http,https) https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11508#M8473 <HTML><HEAD></HEAD><BODY><P>No, like all columns in Security Poliy</P><P>you can only name it i a way that i logical for you.</P><P></P><P>Like:</P><P>Service-Name: SRC-1026-TCP-25</P><P>Destination Port TCP-25</P><P>Source Port: 1026</P><P></P><P>Cheers</P><P>Marco</P></BODY></HTML> Mon, 04 Mar 2013 10:19:19 GMT https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11508#M8473 ExclusiveNetworksGermany 2013-03-04T10:19:19Z Re: services (http,https) https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11509#M8474 <HTML><HEAD></HEAD><BODY><P>hmm, I guess that will be a doable workaround - thanks again!</P></BODY></HTML> Mon, 04 Mar 2013 10:35:18 GMT https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11509#M8474 mikand 2013-03-04T10:35:18Z Re: services (http,https) https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11510#M8475 <HTML><HEAD></HEAD><BODY><P>Thanks for the fast replys.</P></BODY></HTML> Mon, 04 Mar 2013 12:50:06 GMT https://live.paloaltonetworks.com/t5/general-topics/services-http-https/m-p/11510#M8475 billpipes 2013-03-04T12:50:06Z